CVE-2025-14645
📋 TL;DR
This SQL injection vulnerability in code-projects Student File Management System 1.0 allows attackers to execute arbitrary SQL commands via the user_id parameter in /admin/delete_user.php. Remote attackers can potentially access, modify, or delete database content. Organizations using this specific software version are affected.
💻 Affected Systems
- code-projects Student File Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise including data theft, data destruction, authentication bypass, and potential server takeover via SQL injection to RCE chaining.
Likely Case
Unauthorized access to student records, user data exfiltration, privilege escalation, and database manipulation.
If Mitigated
Limited impact with proper input validation, parameterized queries, and network segmentation in place.
🎯 Exploit Status
Exploit details are publicly available on GitHub. Attack requires access to admin interface or authentication bypass.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: https://code-projects.org/
Restart Required: No
Instructions:
1. Check vendor website for updates 2. If no patch available, implement workarounds 3. Consider replacing with alternative software
🔧 Temporary Workarounds
Input Validation and Sanitization
allAdd server-side validation to sanitize user_id parameter
Modify /admin/delete_user.php to validate user_id as integer: if(!is_numeric($_GET['user_id'])) { die('Invalid input'); }
Parameterized Query Implementation
allReplace direct SQL concatenation with prepared statements
Replace: $sql = "DELETE FROM users WHERE id = '" . $_GET['user_id'] . "'";
With prepared statements using PDO or mysqli
🧯 If You Can't Patch
- Implement WAF rules to block SQL injection patterns targeting /admin/delete_user.php
- Restrict access to admin interface via IP whitelisting and strong authentication
🔍 How to Verify
Check if Vulnerable:
Test /admin/delete_user.php?user_id=1' OR '1'='1 and observe SQL error or unexpected behaviorCheck Version:
Check software documentation or configuration files for version informationVerify Fix Applied:
Test with SQL injection payloads and verify proper error handling or rejection📡 Detection & Monitoring
Log Indicators:
- SQL syntax errors in web server logs
- Multiple DELETE requests to /admin/delete_user.php with unusual parameters
- Database error messages containing user_id parameter
Network Indicators:
- HTTP requests to /admin/delete_user.php containing SQL keywords (UNION, SELECT, etc.)
- Unusual database connection patterns from web server
SIEM Query:
source="web_logs" AND uri="/admin/delete_user.php" AND (user_id CONTAINS "'" OR user_id CONTAINS "OR" OR user_id CONTAINS "--")